diff --git a/.github/workflows/binary-scanner.yaml b/.github/workflows/binary-scanner.yaml
deleted file mode 100644
index 03585add..00000000
--- a/.github/workflows/binary-scanner.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-name: Binary Scanner
-
-on:
-  schedule:
-    - cron: '28 1 * * *'
-
-jobs:
-  scan:
-    name: Scan
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-      - name: Pull image
-        run: |
-          docker pull dopplerhq/cli:latest
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
-        with:
-          image-ref: 'docker.io/dopplerhq/cli:latest'
-          exit-code: '1'
-          ignore-unfixed: true
-          scanners: vuln
diff --git a/.github/workflows/go-supported-version-check.yml b/.github/workflows/go-supported-version-check.yml
deleted file mode 100644
index d17368ce..00000000
--- a/.github/workflows/go-supported-version-check.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-name: Vulncheck
-
-on:
-  pull_request:
-  push:
-  schedule:
-    - cron: "28 1 * * *"
-
-jobs:
-  vulncheck:
-    name: Analysis
-    runs-on: ubuntu-latest
-    steps:
-      - name: Go Supported Version
-        uses: dopplerhq/go-supported-version-check-action@v1
-        with:
-          go-version: "1.25" # GO_VERSION_DEF
-          version-requirement: any-supported
diff --git a/.github/workflows/salus.yaml b/.github/workflows/salus.yaml
deleted file mode 100644
index c836f77f..00000000
--- a/.github/workflows/salus.yaml
+++ /dev/null
@@ -1,38 +0,0 @@
-on:
-  push:
-  schedule:
-    - cron: '0 0 * * *'
-
-name: Salus security scan
-
-jobs:
-  semgrep:
-    runs-on: ubuntu-latest
-    name: Semgrep
-    steps:
-      - uses: actions/checkout@v2
-      - name: Scan
-        id: scan
-        run: |
-          set -eo pipefail;
-          python3 -m pip install semgrep;
-          semgrep scan --error --config https://semgrep.dev/p/trailofbits --config semgrep_configs
-
-  salus_scan_job:
-    runs-on: ubuntu-latest
-    name: Salus Security Scan
-    steps:
-    - uses: actions/checkout@v2
-    - name: Salus Scan
-      id: salus_scan
-      uses: federacy/scan-action@0.1.5
-      env:
-        SALUS_CONFIGURATION: "file://salus-config.yaml"
-      with:
-        report_uri: file://./salus-report.txt
-        report_format: txt
-    - uses: actions/upload-artifact@master
-      if: failure()
-      with:
-        name: Scan results
-        path: ./salus-report.txt
diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml
index 8846e917..999ec07b 100644
--- a/.github/workflows/vulncheck.yml
+++ b/.github/workflows/vulncheck.yml
@@ -3,21 +3,19 @@ name: Vulncheck
 on:
   pull_request:
   push:
-  schedule:
-    - cron: '28 1 * * *'
 
 permissions:
   contents: read # to fetch code (actions/checkout)
 
 jobs:
   vulncheck:
-    name: Analysis
+    name: Run govulncheck
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v6
         with:
           go-version: '1.25' # GO_VERSION_DEF
           check-latest: true
@@ -27,3 +25,12 @@ jobs:
       - name: Run govulncheck
         run: govulncheck ./...
         shell: bash
+  versioncheck:
+    name: Run go-supported-version-check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Go Supported Version
+        uses: dopplerhq/go-supported-version-check-action@v1
+        with:
+          go-version: "1.25" # GO_VERSION_DEF
+          version-requirement: any-supported